Privacy Policy

This policy explains what PaddleLens collects, why, who it goes to, how long we keep it, and how to get it removed. It applies to the PaddleLens website and app, operated by Get Skilled LLC, a Wyoming limited liability company (United States).

1. Who is responsible for your data

For account data and purchases made from us, Get Skilled LLC is the business responsible. For athlete data, analysis video, Community content, practice sign-ups and waitlists, and whether a member owes a club-posted fee, your club is in the driver's seat — the coach decides who is on the roster and therefore who can access the feed; the club chooses its own sign-up rules — when RSVPs open, practice seat limits and what members see of the waitlist; and each member decides what they post, comment on, react to and download. We process that information on the club's behalf. We separately decide the minimum connected-account, transaction, fraud and security, support, and application-fee records needed to operate Stripe Connect and meet our legal and accounting obligations. If you're a paddler, ask your coach first about your club's data; if you'd rather come straight to us, email info@paddlelens.com and we'll help.

2. What we collect

You give us

• Account data: name, email address, your role, and the club you belong to. If you use a PaddleLens password we store only its hash. If you choose Google sign-in, Google confirms a stable account identifier, verified email and display name; we keep the identifier to link the right account and discard Google's sign-in tokens. Google does not receive your phone number, birth date, club or athlete data from us.
• Your mobile number — only if you choose to give one. We send a one-time code to it and nothing else happens until you type that code back, so a number nobody proved they hold is never texted. What it is then used for is a closed list: session cancellations, urgent notices, coach-posted lineup notices and optional coded RSVP questions about your own club, a short reply when you answer one by text — for example whether you have a seat, your place on the waitlist, or when RSVPs open, or that a session with an entry fee takes answers in the app, or that a session aimed at one squad is answered in the app — one welcome message, a single answer when you text us HELP or about stopping, seat texts about your own place if you and your club separately turn them on through an approved provider, and the verification code itself. If the reply that RSVPs are not open yet cannot go by text, we send you the same thing once by push notification and email instead. When you confirm the number we also note which wording of the consent you confirmed it under. Never marketing, never another club's messages, and never a link — nothing we text contains one, so a message that claims to be us and does is not. No mobile information will be sold or shared with third parties or affiliates for marketing or promotional purposes. Reply STOP to any of them to end them, at any time, with no need to tell us anything. Leave the field empty and everything still reaches you by email.
• If you use RSVP by text: we store the six-character correlation code, the internal practice, club and account records it belongs to, the phone it was sent to, when it expires, whether delivery succeeded and whether it was answered. For an inbound reply we store the messaging provider's message ID, the phone, the short reply text, when it arrived, how it was handled and — only when it matched — the intended practice and account. The code, not the phone number, selects the practice.
• Your date of birth, at sign-up. We ask for the whole date because it makes a better age check, we use it to confirm you are at least 13 — and then we store only the year. The day and month are never written down. If we hold no year for you — an account from before we asked — you can add just the year, once, in Settings → Account & privacy; a year that shows you are under 13 is refused there, as it is at sign-up, and a person here checks that account before another year can be added. However we got it, the year tells us whether you are 18 or over, which decides whether you are offered the Show my name on waitlists switch and can appear by name on a waitlist. If it shows you are under 18, it also excludes you from attendance-based waitlist priority, keeps any change you make from being marked as a late drop (Terms §4) and switches the advertising tags off for good in any browser you sign in on (section 9); and, if you say yes to advertising cookies, it decides whether Meta's tag may run for you on our public pages while you are signed in, and whether a credit-pack checkout or purchase may be reported to Reddit (see the Reddit events below). The year is used for nothing else. The year itself is never sent to an advertising platform. To correct it, contact us.
• A record that you accepted these documents: the date, which version, the email address on your account at the time and the IP address the acceptance came from.
• Athlete data, entered by you or your coach: weight, height, paddling side, squad, trial results, discipline, and coach notes.
• A coach's notes and marks on your report. What a coach writes under a technique report, and what they draw on its analyzed frames, with a caption. They are kept beside the machine-written report, never mixed into it, and everyone who can open the report can read them.
• Video you upload for analysis.
• Photos and video you send to your club's photo drop, if your club has switched it on. These do not stay with us — they pass through to the club's Google Drive. Section 3 explains, and you are shown the same explanation before your first upload.
• Private Community activity: the posts and comments you write, your reactions, the photos and videos you attach, their safe file names and technical properties, and the club they were shared with. Current authorized members of that club can see them; section 6 explains who that includes.
• Other club activity: messages, announcements, crew and boat plans, and feedback you send us.
• Your answers to club sessions. Whether you are going, maybe or can't make it; when you answered, to the second, and every later change; whether an organiser recorded the answer for you, and who; whether it came in before RSVPs opened; and whether a change counted as a late drop under your club's rule. Your club's organisers see these; other paddlers never see when you answered, who recorded an answer for you, or a late drop. If your club sets a practice seat limit, we also keep your seat or waitlist position, an earlier opening for your squad, offers and their deadlines, whether you took them, staff placements, the attendance count used for fewest-sessions priority where eligible, and the reason for each change. A proven minor is never counted for that priority. Answer time keeps the first-come line in order. We also keep your answer to the Show my name on waitlists switch in Settings → Account & privacy, which is off unless you turn it on.
• If your club aims a session at one squad instead of the whole club: that a coach put you on the candidate list for it, whether you are Core or Reserve, what you answered and when, whether you were given a place and in which seat, and whether you were marked present or absent once the session ran — being left unmarked is not the same as being marked absent, and records nothing. If the answer was recorded for you — by a coach, or by an assistant your club granted that permission — we store that it was recorded rather than typed by you, who recorded it and when; your own answer replaces it whenever you say so. Every one of those changes is also written to a roster history of version numbers and status codes, carrying no names and no notes. Who sees any of it is your club's choice, not ours: coaches see the whole roster, an assistant coach only what their club has granted them, and section 6 gives the three settings a club picks between for what the other people asked can see — plus the separate setting for what members who were not asked see of the session on the calendar, which can be nothing at all, a reserved slot with no name or place, or its name, time and place. That last one shares that the session exists; it never shares who was asked or what anyone answered.
• Club-fee records, if your club uses Stripe Connect: the connected-account ID, country, currency and readiness status; the fee title, description, amount and due date; the payer's email and our internal club, fee and member IDs; Stripe's Checkout Session, PaymentIntent, Charge and application-fee references; and payment, refund and dispute amounts and status. Identity checks, full bank details and full card details are entered with Stripe and are not stored by us.
• What you write on the contact form, and how to reach you about it. The form is open to anyone, with or without an account: it takes your message, your email address so we can reply, and — only if you choose to give it — your name and phone number. The phone number is used to solve the thing you wrote about and nothing else. It is never used for marketing, never shared, and never added to any mailing list. Once we mark your message resolved, your name, email and phone are erased within 30 days; the message itself is kept, so we remember what was broken. Ask us at any time and we'll erase them sooner.
• Photos and files you attach to messages. These stay on our server and are deleted automatically 14 days after they were sent — the retention table in section 7 lists them, and the notice before your first upload says the same. Camera metadata (EXIF), including the GPS position your phone embeds in photos, is removed at upload and never stored.
• A screenshot you choose to attach to feedback. Optional, and only from inside the app. It is visible to us alone — never to your club, your coach or anyone else — and it is not emailed anywhere: the alert we get says a screenshot exists and we open it here. Camera metadata (EXIF) is removed at upload, exactly as for message attachments. It is erased when the contact details on that message are, and deleting your account deletes it even though the message itself stays.

We derive from your video

• Body-landmark measurements: the positions of up to 33 body points per frame, and the joint angles, stroke rate, timing and consistency computed from them.
• Scores against your coach's criteria, and an AI-written report.
• Up to about 60 small annotated still frames per analysis, showing the tracked skeleton over the paddler — these are photographs of a person.

We collect automatically

• Technical basics: IP address, browser and device type, and timestamps in server logs — used for security, abuse prevention and rate-limiting.
• Error and job diagnostics when an analysis fails.
• When you create an account, which ad or link brought you. If the page you first opened carried an ad's campaign tags — from a Reddit, Facebook, Instagram or TikTok ad, say — we keep them with your new account: the platform, campaign and ad names, which kind of ad-click code the address carried (never the code itself), the name of the website that sent you (never the page), and which of our public pages you arrived on. It is read from the address in that browser tab and held there only until you sign up — nothing is stored on your device — and it is never sent to Google, PostHog, Meta, Reddit, TikTok or anyone else. We use it to count how many sign-ups each ad or link brings. If you asked for an emailed sign-up link, it waits beside that link until you use it. Accounts created before this version of the policy have none. If you accept advertising cookies, Reddit's own tag reads the same campaign tags from the address you land on (section 9); this record is still never sent to it.
• Only if you accept analytics cookies: Google Analytics receives normalized public acquisition pages, shape-only signup progress and checkout-start. Signup progress says only club, solo or invite and, after account creation, email or Google — never an email address, invite code or typed form value. A signed-in account may carry GA's separate server-generated pseudonymous reserved User-ID, never its database ID, name or email. PostHog, on US servers, receives shape-only account activation, normalized private product screens and product moments such as a video queuing, an analysis completing, a report opening, an RSVP, lineup save or verified credit purchase landing. Purchase measurement carries the pack shape and value, not its Stripe Checkout Session. Its signed-in identity is a different server-generated pseudonymous code, never a database ID, name or email. Neither receives club or athlete content, messages, typed form content or raw record IDs. PostHog strips all queries and fragments; GA retains only shape-checked campaign tags on approved public landing pages. Autocapture, session replay and form-interaction capture are off.
• Only if you accept cookies, and only on our public pages: that a browser opened one of them, and whether the visit reached a step we're measuring such as opening the sign-up page — sent to each platform we advertise on, so we can tell whether an ad brought anyone here — and so the platform can choose who sees our ads next and use it for its own advertising. Today those platforms are Meta (Facebook and Instagram) and Reddit; if we add another it is named on this page and on the subprocessors page before it runs. It works on the marketing and contact pages, the blog, and the sign-in and sign-up screens — Meta's while you are signed out or, once you are signed in, only if the year of birth we hold shows you are 18 or over; Reddit's on fewer of them, and only while you are signed out (section 9) — never once you are inside the app, so no page carrying a report, a message, an athlete or a club is ever reported to it. Meta and Reddit are advertising companies and will connect the visit to your Facebook, Instagram or Reddit account if you have one; that is what accepting means, and section 9 is the detail. Reddit's tag also learns, anonymously, when someone asks for a sign-up link.
• Only after ads consent, a newly created account and the server's adult check: Meta may receive anonymous CompleteRegistration, deduplicated between browser and server with one event ID. The browser copy naturally exposes its browser type; the server copy carries only that event ID, the validated request IP and Meta's own browser/ad-click IDs, and does not forward the raw User-Agent header — never name, email, phone, birth date, PaddleLens account ID, club or athlete data. There is no Meta Purchase event. Declining, never answering or being under 18 means no signup event.
• Only after ads consent and the adult check — and, for the two purchase events, your acceptance of the current Terms and this version of this policy: Reddit may receive SignUp when a new account is created, and AddToCart and Purchase when you start and complete buying a credit pack. Each carries an event ID — random, except a purchase's, which is derived from the payment so it can only count once — your email address hashed with SHA-256 (Reddit can match it to a Reddit account; it never receives the address itself) and a code for your account that only Reddit receives and that cannot be turned back into your account ID. SignUp and AddToCart also carry the validated request IP, your browser's User-Agent header and screen size, and Reddit's own browser and ad-click IDs from its cookies, and SignUp the address of the sign-up page it was made on; the two purchase events carry the pack and its price. Never name, phone, birth date, PaddleLens account ID, club or athlete data. Declining, never answering, being under 18 or — for a purchase — not having accepted these versions means no Reddit event.

We do not track where you are: there is no device location in PaddleLens, we never ask your browser for it, and GPS coordinates are stripped out of every photo you upload. Beyond the country/region estimate above, the only place we store is your club's training venue — a lake, a river or a town that a coach picks from a search box when scheduling, so the calendar can show the forecast for that session. It describes the water, not a person; it is the same for every member of the club; and the only thing it is ever used for is asking WeatherAPI.com what the weather will be. We do not collect your contacts. Advertising cookies are the one thing on this page that is genuinely new: the measurement tags above set them, they are cross-site tracking by any honest definition, and they are why the cookie banner names Meta and Reddit rather than hiding them under "analytics". They stay off unless you switch them on, they never run on a signed-in screen, and section 9 tells you how to turn them back off.

3. Video: three separate paths

Analysis video is temporary

• You upload it. It is stored on our server only while it waits in the queue and while it is being analyzed.
• Pose tracking runs on our own server. The video file is not sent to any AI provider.
• When the analysis finishes, the video file is deleted — normally within minutes of the upload.
• If the analysis fails, or the video is never analyzed, it is deleted automatically within 24 hours.
• We do not keep an analysis-video library, we do not review analysis footage, and we do not use it to train models.

Community media is durable and private to your club

A photo or video attached to a Community post is stored on our server until the post is deleted. Only current authorized members of the selected club can open or download the live file; access is checked again on every request, so leaving or being removed from the club blocks it immediately. A downloaded copy is then on that member's device and cannot be recalled by deleting the post.

• We remove embedded camera and location metadata: photos are re-encoded, and videos are rewritten without embedded location, camera-comment and similar container metadata.
• We do not analyze Community media and never use its text, photos or videos to train a model.
• Unpublished uploads are erased within 24 hours. A deleted post is hidden immediately, remains recoverable for a nine-second Undo, and then has its live media permanently purged by an automated sweep no later than 24 hours. Section 7 gives the backup limit.
• Posting an identifiable minor requires their parent or guardian's permission for club sharing and member downloads. A guardian can ask the club or us to remove the live copy at any time.

The club photo drop is a third, separate path — and it works the other way round

Everything above is about analysis. A club can also switch on a photo drop: a coach or club manager connects their own Google Drive, and after that members can send photos and video — from practices, races, socials — through PaddleLens into a folder inside that person's Google account. It is a club album, not an analysis.

• The files pass through our server and are not kept by us. They are kept by the club, in that manager's Drive, for as long as the club leaves them there.
• The album is reachable by anyone who has its link — no account, no password. The folder is created that way on purpose: it is how a paddler with no Google account gets to see the club's photos. It also means the people who can see the album are the people holding the link, which is not the same set as the club's roster, and a link can be forwarded. Your club chooses who to give it to; we cannot know who has it.
• We cannot delete them, and neither can you. Only the owner of that Google account can — so a request goes to the coach who connected it. Deleting your PaddleLens account does not touch them. This is the one place where "ask us and it's gone" does not apply, which is exactly why it is spelled out here and again on screen before your first upload.
• Our access to that Drive is deliberately narrow: we hold a token scoped so it can only see and write the folder PaddleLens created for the club. We cannot read anything else in the manager's Drive, and we do not.
• Nobody is opted in silently. You are shown this before your first upload and have to accept it, and we record your answer — including a refusal — with the date and the Google account it named.

These are three different routes: analysis video is temporary on our server; Community media is durable on our server but restricted to current club members; and photo-drop media lives in the club manager's Google Drive and may be reachable by anyone holding its link. The screen where you upload identifies the route before you share.

4. Body-landmark data

To measure technique we compute the positions of body points — shoulders, elbows, hips, knees, and points on the head — through each stroke, and we keep the resulting numbers along with the annotated frames. We use this data only to produce your technique report, your progress history and your club's aggregates.

We do not use it to identify anyone, we do not run face recognition, we do not build a biometric template capable of identifying a person, and we do not sell, lease, trade or otherwise profit from it. Where the law treats this kind of measurement as biometric information, we treat it that way too: we collect it only after the paddler (or their guardian) has agreed through their club, we store it under the retention schedule in section 7, and we destroy it on request or once it is no longer needed for the purpose above.

The permission itself is held by your club, not by us: a coach confirms, at the moment they invite you, that they hold your written permission — or your parent or guardian's, if you are under 18 — covering being filmed and having the video analyzed automatically. We record that confirmation with the date and the coach who gave it. If you are not sure what your club has on file for you, ask them, and email info@paddlelens.com if you do not get an answer.

5. Why we use your data

6. Who your data is shared with

People

• You: always, all of your own data — including your own place on any session roster, whatever else your club shows the rest of the squad.
• Your coach: your athlete profile, your reports and frames, your attendance, your session responses and when you gave them, your seat or waitlist place, and your standing on any roster, messages sent to them or to shared groups, and Community content posted to their club. If your club is part of an organization, its owners can see the same.
• Your assistant coaches: the same list, narrowed to what your club has granted each of them — except that they always see your answers to club sessions and when you gave them, and can always record an answer for you on a club session, because that is part of organising a session. Seeing squad rosters, taking roll call, picking reserves, placing someone in a boat, recording an answer for you on a squad session, changing the club's RSVP rules and reading coaching notes are separate permissions a coach switches on one at a time. They are checked as each screen is drawn, not at the moment they were granted, so withdrawing one takes effect immediately rather than at the next sign-in.
• Your club's team managers — people who run the calendar and attendance without coaching. They always see the club roster, your answers to club sessions with when you gave them and their history, and your seat or waitlist place. Taking roll call, recording an answer for you on a club session and changing the club's RSVP and seat rules are switches your club controls, and they see who has paid a club fee only if a coach grants that separately. They never see your reports or frames, your weight, measurements or trial results, coaching notes, your standing on a squad roster, or the boat builder.
• Your club's administrator: roster and club-level information for the clubs they manage.
• Other current members of the same club: never your reports. They can see what you post in shared groups and Community, including your name, comments, reactions, photos and videos. They may download Community media; leaving or removal blocks future access but cannot recall an earlier download. What they see of a session roster is your club's choice, and it is described just below.
• Get Skilled LLC staff (currently, one person): operational access to accounts, usage and billing needed to run and support the platform, technical access to stored data when diagnosing a problem, and review of the annotated analysis frames and their measurements to check the analyzer is measuring correctly.

Session rosters, and what "attendance" does and does not mean

A session can be aimed at one squad rather than the whole club. The people asked are the candidates: some are Core, whose place is held for them, and the rest are Reserve, who can be picked when a place opens. Your club chooses one of three settings for what a candidate sees of everybody else, and the choice in force when a session is published is the one that governs it:

• Your own place only. You see what you were asked, what you answered and whether you are in the boat. You see nobody else.
• The confirmed line-up, by name. You also see who is in the boat and in which seat — the people who will be on the water beside you.
• Everyone who was asked. You also see the full candidate list with each person's Core or Reserve standing and the seats they can take.

Club sessions with a seat limit

On a practice with a seat limit, a Going after the boat is full joins the waitlist. Your own seat or position is shown with the rule that applies. Your club can choose first come (the default), or fewest eligible sessions over a stated period.

• Your own place only — the default. You see your own place and answer time, never another paddler's.
• Names, in order. Your club must enable this and the card tells you before you answer. A name appears only when we can establish the member is 18 or over, they switched on Show my name on waitlists in Settings → Account & privacy, and they accepted this policy update. Otherwise they appear as "A paddler". Turn the switch off at any time; your place does not change.

Other paddlers never see answer times, who recorded an answer, late drops, attendance counts or payment state. Organisers see the information needed to run the session. Fewest-sessions priority never counts a proven minor or changes their first-come place.

Companies (processors and payment providers)

Text messages. No mobile information will be sold or shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent will not be shared with any third parties.

Most service providers above act on our instructions. Stripe also acts under its own payment, fraud-prevention, identity-verification and regulatory duties, as its terms and privacy policy explain. The advertising row is different, and the difference has a name. For what the measurement tag collects and sends, we and Meta Platforms Ireland Limited are joint controllers under Article 26 of the GDPR. That is not our characterisation — it is Meta's, set out in the Controller Addendum that forms part of Meta's Business Tools Terms, and it is the arrangement that decides which of us answers for what.

Who answers for what, in plain terms

• Us, for putting it there. Asking your permission first, having a lawful basis for it, telling you what it collects, keeping it off every signed-in screen, and configuring it correctly. That is the part this policy is.
• Meta, for everything after it arrives. Once the visit reaches Meta, what it is used for and how long it is kept are Meta's decisions under Meta's Privacy Policy, and Meta is responsible for answering requests about that half — access, deletion, objection. Your Facebook or Instagram settings are the fastest route to it.
• Either of us will take the request. You never have to work out which. Write to info@paddlelens.com about any of it and we will answer what is ours and pass the rest to Meta — the Addendum gives us seven days to do that, and we treat it as a deadline rather than a target. You will get an answer from us whether or not Meta gives you one.

The full text of that arrangement is Meta's to publish and it is linked above; this is the substance of it, which is what Article 26(2) asks us to give you. All of it sits behind a yes-or-no you can change at any time, which remains the simplest way to be outside it entirely.

Reddit is set up differently. Under Reddit's Business Tool Terms and its Advertising Data Processing Agreement, Reddit and we are each an independent controller of what Reddit's tag and our server send it — Reddit's characterisation, not ours. We answer for asking you first, for keeping to the list in section 2 and for everything on our side of the send; Reddit answers for what it does with the data once it arrives, under Reddit's Privacy Policy, including answering access, deletion and objection requests about its half. You can still write to info@paddlelens.com about either half: we answer ours and pass the rest to Reddit within seven days, as we do for Meta.

The full, dated list — with each company's jurisdiction — is on the subprocessors page. When a provider that touches club, athlete or account data is added or replaced, that page is updated before it starts and PaddleLens asks you to accept the updated policy the next time you open the app — so a change cannot pass you by unread. You can object on reasonable data protection grounds by writing to info@paddlelens.com before you accept, and if we cannot settle it you can stop using the Service and we will delete your data. Advertising and measurement partners hold no club or athlete data, and of your account only what the box below lists; they are subject to a promise that is narrower and easier to check — we name each one on that page before it goes live, and every one of them inherits the same two limits: your consent, and the list in the box below of exactly what may be sent. Their tags run on public pages only, and our server sends nothing that isn't on that list. We may also disclose data if legally required, to protect someone's safety, or in connection with a merger or sale of the business — in which case we'll tell you, and this policy continues to apply until replaced.

7. How long we keep things

This table is also our published retention and destruction schedule for the body-landmark data in section 4. Reports do not quietly expire on a timer: they last while your account does and go when you or your coach remove them. Temporary uploads and deleted Community media do have the firm clocks listed below.

Community media is included only in encrypted backups. We keep the last seven available daily generations and the last four available weekly generations. If a scheduled run is missed, the oldest weekly generation may be older than four calendar weeks; a deleted file remains encrypted until the generation containing it is replaced. Each generation is one atomic snapshot containing both the private media and its matching encrypted database archive, so routine retention keeps or removes the complete restore pair. The current backup location is operator-controlled storage in Falkenstein, Germany. No off-site Community backup provider is currently approved or configured; the backup job refuses a remote destination in this mode. Backups are used only for disaster recovery, never to retrieve a deleted post or restore an individual file. Before a disaster-restored Service reopens, we run the deletion sweep recorded in that snapshot and reconcile known later deletion requests. A snapshot cannot record a deletion made after its timestamp, so we do not claim that restoring it alone can preserve every later deletion.

The current backup job does not create split restore pairs. If an encrypted database archive was isolated by an older backup version because its matching media snapshot could not be verified, later Community backup runs stop instead of silently accumulating more isolated archives. That archive is not used for restore and is not deleted automatically: the backup and privacy owner must reconcile its exact snapshot stamp and resolve it under this retention and deletion schedule before automated Community backups resume.

8. Children and guardians

Paddling clubs include young people, and we've designed for that rather than pretending otherwise.

• Under 13: no accounts. PaddleLens is not directed to children under 13, and children under 13 may not register. A coach may keep an athlete profile for a younger paddler — no login, no email address for the child, no sign-up by the child — only where the club holds a parent or guardian's written permission covering filming and automated analysis.
• 13–17: accounts allowed with guardian permission, which the club is responsible for obtaining before sending the invite.
• Community media needs separate permission. Before anyone posts an identifiable minor, the person posting must have the parent or guardian's permission to share it with the club and let current members download it. Permission for analysis alone is not permission to publish it in Community.
• We collect no more data about a minor than about an adult. We don't profile them or use their data for advertising. Analysis data goes only where needed to produce the report; Community content is visible to current members of the club only when it was posted with the separate permission above.
• Advertising and minors, stated exactly. We never sell or share the personal information of anyone we know to be under 16, and we never build an advertising audience from anything we hold about our members, of any age — section 6 is the promise, and it has no age exception because it doesn't need one. Our ads on other platforms are set to 18 and over wherever the platform lets us set an age at all. The events our server sends — Meta's sign-up, and Reddit's sign-up and purchases — are never sent for anyone we know, or count, as under 18. The one caveat worth stating plainly: the website measurement in section 9 runs on public pages only. For a visitor who is not signed in it cannot tell a 15-year-old from an adult and does not try to — and that includes Reddit learning, anonymously, that someone asked for a sign-up link. Once you are signed in we go by the year of birth we hold: Reddit's tag never runs for a signed-in member, and Meta's runs only if that year shows you are 18 or over — never for a member who is under 18, or whose year we don't hold. It never runs on a signed-in screen. If an account is created in a browser for someone our sign-up check does not count as 18 or over — which includes anyone signing up on their eighteenth birthday — or someone whose year of birth we hold shows they are under 18 signs in there, or a sign-up there is refused at the age check, we switch the advertising tags off in that browser for good and clear their cookies. And if a parent tells us their child used the site before signing up, write to info@paddlelens.com and we will ask the platform to delete what it holds.
• Guardians can act at any time. Email info@paddlelens.com to see what we hold about a child, correct it, refuse further collection, or have it all deleted. We can remove a live Community copy but cannot retrieve a copy another club member already downloaded. We'll respond within 30 days and won't ask for more information than we need to verify the request.
• Photos in a club album are the one thing we can't delete for you. If a club uses the photo drop, pictures of a child may be in a coach's own Google Drive. We will tell you whose account it is and can disconnect the club's Drive so nothing more is sent to it, but the coach is the only person who can remove what's already there. Section 3 explains why.

If we learn we've collected personal information from a child under 13 without the required permission, we delete it.

9. Cookies

Strictly necessary cookies keep sign-in and the sign-up age check working. Analytics and advertising cookies are two separate, optional choices.

How the choice works

• Nothing loads until you say yes. Each switch below is its own answer. Until you have said yes to one — while it is unanswered, and after you've declined — we don't set a cookie or a browser-storage ID, start a tracking tag, or contact Google, PostHog, Meta or Reddit for what it covers. When a switch comes to cover more, we ask that question again, and until you answer it nothing it covers runs; a yes you already gave the other switch stands until you change it — which is what happened when Reddit joined the advertising switch. There is no "reject and we track you anyway".
• One record needs no switch, because it leaves nothing on your device and goes nowhere. When you create an account we keep with it which ad or link brought you (section 2). It is read from the address in the tab — not from a cookie or browser storage — and never sent to Google, PostHog, Meta or any other platform, so your cookie answer does not change it. Deleting your account deletes it.
• Two separate questions, and you can answer them differently. The banner has one switch for GA public-acquisition and PostHog product analytics, and another for Meta and Reddit advertising: measuring our ads, letting both choose who sees them, and their own uses in section 6. Say yes to analytics and no to advertising and neither Meta nor Reddit is ever requested, and no sign-up or purchase is reported. Both switches start off, and neither is needed to use PaddleLens.
• The advertising tags are switched off inside the app. They run on the public pages — the marketing and contact pages, the blog, the FAQ, and the sign-in and sign-up screens — and nowhere else. Meta's runs there while you are signed out and, once you are signed in, only if the year of birth we hold shows you are 18 or over. Reddit's runs on fewer still: only while you are signed out, and never on a page where a password, phone number or birth date is typed — signing in, finishing a new account, or writing to us. Reddit is never told about those pages, even when its tag is still loaded from an earlier one. Neither can fire on a report, a message, an athlete, a club, or any other signed-in screen, and both are held back on any public link carrying something private in it, such as an invite code or a password-reset link. This is enforced in our own code, not by a setting at the platform, and any advertising platform we add is subject to the same code.
• Analytics identities are separate and pseudonymous. PostHog and GA receive different server-generated codes. Neither is a name, email or database ID, and neither goes to Meta or Reddit. The account code Reddit receives with a server event is a third one, different from both.
• What it is never allowed to be about. We do not build, buy or ask for audiences based on health, injury, disability, body measurements, weight, race, religion, politics, sexual orientation, union membership, precise location or immigration status, and we do not let an advertising platform infer any of those from us. A page about training or technique is a page we wrote, not a fact about your body — and everything that is a fact about your body lives behind the sign-in, where no advertising tag runs.
• Declining costs you nothing. Every part of PaddleLens works identically either way. We ask again only if the disclosed analytics boundary changes; otherwise your choice stays put until you reopen settings.
• Change your mind whenever, one switch at a time. Cookie settings stops the matching browser collection and future Meta and Reddit reporting — including, when you change it while signed in, a purchase you had started but not finished paying for. A Global Privacy Control signal does the same the next time you open the app signed in. What a provider already received remains subject to that provider's controls.
• Consent is the server gate too. The server sends Meta's sole signup event only when the live ads answer and adult check both pass; a missing answer or unknown age means no event. It never sends Meta a Purchase event. Reddit's server events need the same live answer and adult check; a purchase also needs the yes you gave when checkout started, your account's current answer when Stripe confirms the payment, and your acceptance of the current Terms and this version of this policy.
• We keep reporting blunt. Google keeps only shape-checked campaign tags on approved public landing pages and strips every other query plus all fragments; PostHog strips every query and is product-only. Meta has no equivalent URL override, so its public PageViews do not fire from an address carrying a query or hash. Reddit's tag trims the address itself to campaign tags and its own ad-click ID, so it may run on the page an ad lands on when the address carries nothing beyond those and the sign-up page's club-or-solo choice — never with an invite code, a reset link, a hash, or any other query in it. Because it also reads the address you came from, it is kept off any page opened from one it may not see. It also runs without its remote settings: features Reddit could otherwise switch on from its side, such as reading what is typed into a form or collecting page descriptions, cannot run here. And every page tells your browser to pass on only our site's name when you move to another page, never the address you were on, so no tag can learn where you were on our site — an invite code or a reset link included.

Counting the two described above, we use two advertising measurement tags — Meta's and Reddit's — and any we add is named on this page and on the subprocessors page before it runs. Beyond that we use no session replay, no heatmaps, no fingerprinting, and no data brokers. If your browser sends a Global Privacy Control signal we honor it: we treat it as a request to leave all of this off, and under California, Colorado and Connecticut law as an opt-out of sale, sharing and targeted advertising. It overrides an earlier acceptance — turn GPC on and the analytics, PostHog and the pixels all stop, even if you once said yes — and it takes effect without you telling us anything. It only ever switches them off; it can't switch them on. You'll see the cookie banner say so rather than offer you a choice that wouldn't do anything.

Your own browser can also block or delete all of this — every browser lets you clear cookies for a site — and PaddleLens will keep working, though you'll be signed out when the session cookie goes.

10. Security

• Passwords are stored hashed with bcrypt — we can't read yours.
• Traffic is encrypted in transit with HTTPS.
• Access is scoped by role and current club membership, checked again whenever Community media is viewed or downloaded; administrative access is limited to what's needed to operate the Service.
• Text is displayed as text rather than executable page code. Community accepts only supported image and video formats, verifies their contents, limits file size and video length, rewrites media to remove embedded metadata, and serves downloads without trusting the uploader's file name.
• Uploads are rate-limited and deleted on the schedule above. Encrypted backups are kept separately for disaster recovery.
• We review our safeguards at least annually, and whenever we make a significant change.

No system is perfect, and you send us data at your own risk. If a breach affects your personal data we will notify affected users, and any regulator we're required to notify, without undue delay.

11. Your rights

Wherever you live, you can ask us to give you a copy of your data, correct it, delete it, or stop a particular use. Email info@paddlelens.com from your account address and we'll respond within 30 days (45 where the law allows longer and the request is complex — we'll tell you). We will not treat you differently for exercising these rights.

Where section 5 says we rely on a legitimate interest, you can object to that use at any time by emailing info@paddlelens.com; we will stop unless we have compelling grounds or need it for a legal claim.

If you're in California, Colorado, Connecticut, Virginia, Texas or another state with a comprehensive privacy law, you also have the rights that law gives you — including access, correction, deletion, portability, and the right to opt out of sale, targeted advertising and profiling. Taking those three one at a time, because two of the answers are still no and one of them changed in August 2026:

• Sale — no, and there never has been one. We have never taken money, or anything else of value, for anyone's personal information.
• Automatic seat decisions and your right to review. A practice seat can be assigned automatically by your club's first-come rule, offered until a shown deadline, or assigned by an organiser. A club may instead choose fewest sessions first: this uses eligible members' seated or attended sessions over the period the club states. It is off by default. Proven minors are never counted and retain their first-come places. Earlier squad openings and offer deadlines are shown; late drops never move anyone's place. An expired offer or a waiting list released at the close is identified as an automatic decision, with its rule. Ask your coach to review from the practice card: an organiser can explain the decision and give a seat by hand. You can also write to info@paddlelens.com. Technique reports remain estimates about a paddle stroke; they are not used to rank the waitlist.
• Targeted advertising and "sharing" — yes, if you accept cookies, and only in the narrow sense described in section 9. A visit to one of our public pages is reported to the advertising platforms we use, and for adults who said yes Reddit also learns sign-ups and credit-pack checkouts and purchases (section 2). Under California law that counts as sharing for cross-context behavioral advertising; under Colorado, Connecticut, Virginia and Texas law it counts as targeted advertising. So we say it rather than hide behind the word "analytics".

You may appeal a refused request by replying to our decision, and if we get it wrong you may contact your state attorney general. An authorized agent may act for you with written proof. We do not sell or share the personal information of anyone we know to be under 16.

Note that some data is your club's to manage. If your coach entered a note about you and we can't remove it without breaking your club's records, we'll tell you and put you in touch.

Where to complain, and who answers for your data

You can always come to us first at info@paddlelens.com, but you don't have to. If you are in the European Union, you can complain to the data protection authority where you live or work; in the United Kingdom, to the Information Commissioner's Office (ICO). In Québec, you can complain to the Commission d'accès à l'information (CAI). In Brazil, you can petition the Autoridade Nacional de Proteção de Dados (ANPD).

The person in charge of protecting personal information at Get Skilled LLC is Rui Lemos, member of Get Skilled LLC. Write to them at info@paddlelens.com, or by post at 1309 Coffeen Ave Ste 1200, Sheridan, WY 82801, United States.

If you are in Canada: the service providers that store or process your data for us are all outside Canada: in the United States, Germany, France, the United Kingdom and Ireland, and, for Google and Meta, elsewhere as well. Section 12 names each one and what it holds. You can ask that same person how those providers handle it, and for our policies and practices about them.

12. Where your data is

Get Skilled LLC is a Wyoming company in the United States. Our servers are not.

So: if you are in the United States, your data is transferred to and processed in Germany, and to France for email. If you are in Europe, it stays closer to home than you might expect. Either way it crosses a border, we rely on the standard contractual protections our providers offer for those transfers, and Germany's data-protection regime is at least as strict as anything in the United States.

If you accept cookies, Google, PostHog and our advertising and measurement partners may also process what they collect on servers outside your country, including in the United States, under their own transfer safeguards — standard contractual clauses, and the EU–US Data Privacy Framework where the company is certified under it. PostHog runs on its US cloud, so if you are in the United States its product analytics never leave your own country, and if you are in Europe they are one of the transfers those safeguards cover. Declining keeps any of it from being collected at all, which is the one transfer safeguard that needs nobody's paperwork.

13. Changes to this policy

We'll show you material changes in the app — and email you where the change affects how we use data you've already given us. The date at the top says when a version takes effect. If we show it early, the prompt says it is advance notice and can be dismissed until that date; once it takes effect, acceptance is required to carry on. A new optional feature may require acceptance sooner, before it handles data under the new rules. The prompt names what moved in plain language, and you can decline and stop using PaddleLens, with your data deleted on request. The "last updated" date at the top always identifies the current version.

14. Contact

Get Skilled LLC, a Wyoming limited liability company · 1309 Coffeen Ave Ste 1200, Sheridan, WY 82801, United States · info@paddlelens.com. Privacy requests, guardian requests and complaints all go to the same address, and reach a human.